Kubit

<a href="https://docs.snowflake.com/en/sql-reference/sql/create-role" rel="nofollow noopener noreferrer" target="_blank">Create a role</a>, name it <code>KUBIT</code>.sql

<a href="https://docs.snowflake.com/en/sql-reference/sql/create-user" rel="nofollow noopener noreferrer" target="_blank">Create a user</a> and name it <code>KUBIT</code>. Kubit team will generate and share a password, which you should use to create the user.SQL

CREATE USER KUBIT PASSWORD='*****' DEFAULT_ROLE = KUBIT; GRANT ROLE KUBIT TO USER KUBIT;

Share your Snowflake account locator with the Kubit team.

<a href="https://docs.snowflake.com/en/sql-reference/sql/create-database" rel="nofollow noopener noreferrer" target="_blank">Create a database</a> called <code>KUBIT</code>.SQL

Make the <code>KUBIT</code> role <a href="https://docs.snowflake.com/en/sql-reference/sql/grant-ownership" rel="nofollow noopener noreferrer" target="_blank">owner</a> of the <code>KUBIT</code> database. This will allow us to create and execute tasks that are only available to an owner role.SQL

GRANT OWNERSHIP ON DATABASE KUBIT TO ROLE KUBIT;

Create a <a href="https://docs.snowflake.com/en/user-guide/warehouses-overview" rel="nofollow noopener noreferrer" target="_blank">Data Warehouse</a> called <code>KUBIT</code> (size depends on your data volume)

1. Grant the <code>KUBIT</code> role the following <a href="https://docs.snowflake.com/en/user-guide/security-access-control-privileges" rel="nofollow noopener noreferrer" target="_blank">privileges</a>: <code>MONITOR | USAGE | OPERATE</code>SQL
 CREATE OR REPLACE WAREHOUSE KUBIT WAREHOUSE_SIZE=... INITIALLY_SUSPENDED=TRUE; GRANT MONITOR ON WAREHOUSE KUBIT TO ROLE KUBIT; GRANT USAGE ON WAREHOUSE KUBIT TO ROLE KUBIT; GRANT OPERATE ON WAREHOUSE KUBIT TO ROLE KUBIT;

Add read-only (<a href="https://docs.snowflake.com/en/user-guide/security-access-control-privileges#table-privileges" rel="nofollow noopener noreferrer" target="_blank">SELECT</a>) permissions to the <code>KUBIT</code> role to your intended data tables/views.

1. <a href="https://docs.snowflake.com/en/sql-reference/sql/create-role" rel="nofollow noopener noreferrer" target="_blank">Create a role</a>, name it <code>KUBIT</code>.sql
 CREATE ROLE KUBIT;
2. <a href="https://docs.snowflake.com/en/sql-reference/sql/create-user" rel="nofollow noopener noreferrer" target="_blank">Create a user</a> and name it <code>KUBIT</code>. Kubit team will generate and share a password, which you should use to create the user.SQL
 CREATE USER KUBIT PASSWORD='*****' DEFAULT_ROLE = KUBIT; GRANT ROLE KUBIT TO USER KUBIT;
3. Share your Snowflake account locator with the Kubit team.
4. <a href="https://docs.snowflake.com/en/sql-reference/sql/create-database" rel="nofollow noopener noreferrer" target="_blank">Create a database</a> called <code>KUBIT</code>.SQL
 CREATE DATABASE KUBIT;
5. Make the <code>KUBIT</code> role <a href="https://docs.snowflake.com/en/sql-reference/sql/grant-ownership" rel="nofollow noopener noreferrer" target="_blank">owner</a> of the <code>KUBIT</code> database. This will allow us to create and execute tasks that are only available to an owner role.SQL
 GRANT OWNERSHIP ON DATABASE KUBIT TO ROLE KUBIT;
6. Create a <a href="https://docs.snowflake.com/en/user-guide/warehouses-overview" rel="nofollow noopener noreferrer" target="_blank">Data Warehouse</a> called <code>KUBIT</code> (size depends on your data volume)
 1. Grant the <code>KUBIT</code> role the following <a href="https://docs.snowflake.com/en/user-guide/security-access-control-privileges" rel="nofollow noopener noreferrer" target="_blank">privileges</a>: <code>MONITOR | USAGE | OPERATE</code>SQL
 CREATE OR REPLACE WAREHOUSE KUBIT WAREHOUSE_SIZE=... INITIALLY_SUSPENDED=TRUE; GRANT MONITOR ON WAREHOUSE KUBIT TO ROLE KUBIT; GRANT USAGE ON WAREHOUSE KUBIT TO ROLE KUBIT; GRANT OPERATE ON WAREHOUSE KUBIT TO ROLE KUBIT;
7. Add read-only (<a href="https://docs.snowflake.com/en/user-guide/security-access-control-privileges#table-privileges" rel="nofollow noopener noreferrer" target="_blank">SELECT</a>) permissions to the <code>KUBIT</code> role to your intended data tables/views.

Create one more user, role and warehouse for development purposes in order to isolate the impact on the production environment and avoid accidents.

Steps

👍 Best Practice